NIST SP 800-53 - Revision history

Tomjones: /* IDENTIFICATION AND AUTHENTICATION' */

2020-03-17T20:30:53Z

IDENTIFICATION AND AUTHENTICATION'

← Older revision		Revision as of 20:30, 17 March 2020
Line 28:		Line 28:
	# SYSTEM AND INFORMATION INTEGRITY		# SYSTEM AND INFORMATION INTEGRITY
	# SUPPLY CHAIN RISK MANAGEMENT		# SUPPLY CHAIN RISK MANAGEMENT
	===IDENTIFICATION AND AUTHENTICATION'===		===IDENTIFICATION AND AUTHENTICATION===
			* IA-1 POLICY AND PROCEDURES - must be documented
			* IA-2 IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS) - In scope for enterprises, but out-of-scope for regular users
			* IA-3 DEVICE IDENTIFICATION AND AUTHENTICATION - In scope for authentication
			*
			*
			*
			*
			*
			*

	===PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY===		===PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY===

2020-03-17T20:19:31Z

References

← Older revision		Revision as of 20:19, 17 March 2020
Line 32:		Line 32:

	==References==		==References==
	*[https://www.nist.gov/privacy-framework/nist-sp-800-53 Reference ~~page~~ page for ~~all~~ 800-53 with other NIST privacy documents]		*[https://www.nist.gov/privacy-framework/nist-sp-800-53 Reference page for 800-53 with other NIST '''privacy''' documents]

	[[Category:Standards]]		[[Category:Standards]]

2020-03-17T20:18:24Z

← Older revision		Revision as of 20:18, 17 March 2020
Line 28:		Line 28:
	# SYSTEM AND INFORMATION INTEGRITY		# SYSTEM AND INFORMATION INTEGRITY
	# SUPPLY CHAIN RISK MANAGEMENT		# SUPPLY CHAIN RISK MANAGEMENT
	==IDENTIFICATION AND AUTHENTICATION'==		===IDENTIFICATION AND AUTHENTICATION'===
	==PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY==		===PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY===

	==References==		==References==

2020-03-17T20:17:34Z

Contents

← Older revision		Revision as of 20:17, 17 March 2020
Line 7:		Line 7:

	==Contents==		==Contents==
	After the Introduction and discussion of the fundamentals the following set of controls was delineated in section 3.		After the Introduction and discussion of the fundamentals the following set of controls was delineated in section 3. The bolded items are analysed in the sections betow.
	# ACCESS CONTROL		# ACCESS CONTROL
	# AWARENESS AND TRAINING		# AWARENESS AND TRAINING
Line 22:		Line 22:
	# PROGRAM MANAGEMENT		# PROGRAM MANAGEMENT
	# PERSONNEL SECURITY		# PERSONNEL SECURITY
	# PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY		# '''PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY'''
	# RISK ASSESSMENT		# RISK ASSESSMENT
	# SYSTEM AND SERVICES ACQUISITION		# SYSTEM AND SERVICES ACQUISITION
Line 28:		Line 28:
	# SYSTEM AND INFORMATION INTEGRITY		# SYSTEM AND INFORMATION INTEGRITY
	# SUPPLY CHAIN RISK MANAGEMENT		# SUPPLY CHAIN RISK MANAGEMENT
			==IDENTIFICATION AND AUTHENTICATION'==
			==PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY==

	==References==		==References==

2020-03-17T20:15:31Z

Contents

← Older revision		Revision as of 20:15, 17 March 2020
Line 8:		Line 8:
	==Contents==		==Contents==
	After the Introduction and discussion of the fundamentals the following set of controls was delineated in section 3.		After the Introduction and discussion of the fundamentals the following set of controls was delineated in section 3.
	# ACCESS CONTROL ~~.................................................................................................................. 17~~		# ACCESS CONTROL
	# AWARENESS AND TRAINING		# AWARENESS AND TRAINING
	# AUDIT AND ACCOUNTABILITY		# AUDIT AND ACCOUNTABILITY
Line 14:		Line 14:
	# CONFIGURATION MANAGEMENT		# CONFIGURATION MANAGEMENT
	# CONTINGENCY PLANNING		# CONTINGENCY PLANNING
	'''# IDENTIFICATION AND AUTHENTICATION'''		# '''IDENTIFICATION AND AUTHENTICATION'''
	# INCIDENT RESPONSE		# INCIDENT RESPONSE
	# MAINTENANCE		# MAINTENANCE

2020-03-17T20:14:41Z

Contents

@@ Line 8: / Line 8: @@
 ==Contents==
 After the Introduction and discussion of the fundamentals the following set of controls was delineated in section 3.
 ==References==

2020-03-17T20:06:25Z

Context

← Older revision		Revision as of 20:06, 17 March 2020
Line 4:		Line 4:
	*This page is addressed to the contexts of the evolving standard.		*This page is addressed to the contexts of the evolving standard.
	** [[NIST SP 800-53 Rev 4]] was published on 2013-04		** [[NIST SP 800-53 Rev 4]] was published on 2013-04
	* The [ final public draft of Revision 4] was published on 2020-03 - the most notable change is to broaden the scope from federal systems to systems in general. Another change was to merge privacy and security so that each was addressed in each section.		* The [https://csrc.nist.gov/News/2020/nist-releases-fpd-sp-800-53-rev-5 final public draft of Revision 4] was published on 2020-03 - the most notable change is to broaden the scope from federal systems to systems in general. Another change was to merge privacy and security so that each was addressed in each section.

	==Contents==		==Contents==

2020-03-17T20:04:36Z

References

← Older revision		Revision as of 20:04, 17 March 2020
Line 10:		Line 10:

	==References==		==References==
	*[https://www.nist.gov/privacy-framework/nist-sp-800-53 ~~General~~ page for all 800-53 documents]		*[https://www.nist.gov/privacy-framework/nist-sp-800-53 Reference page page for all 800-53 with other NIST privacy documents]

	[[Category:Standards]]		[[Category:Standards]]

2020-03-17T20:03:57Z

Contents

← Older revision		Revision as of 20:03, 17 March 2020
Line 7:		Line 7:

	==Contents==		==Contents==
	After the Introduction and discussion of the ~~funamentals~~ the following set of ~~cntrols~~ was delineated.		After the Introduction and discussion of the fundamentals the following set of controls was delineated in section 3.

	==References==		==References==

2020-03-17T20:02:14Z

References

← Older revision		Revision as of 20:02, 17 March 2020
Line 10:		Line 10:

	==References==		==References==
			*[https://www.nist.gov/privacy-framework/nist-sp-800-53 General page for all 800-53 documents]

	[[Category:Standards]]		[[Category:Standards]]